Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade golang-raceUpgrade skopeoUpgrade golang-testsUpgrade podmanUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade conmonUpgrade toolboxUpgrade libslirp-develUpgrade grafanaUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade delveUpgrade podman-pluginsUpgrade skopeo-testsUpgrade grafana-pcpUpgrade criu-develUpgrade criu-libsUpgrade crunUpgrade containers-commonUpgrade runcUpgrade aardvark-dnsUpgrade buildah-testsUpgrade libslirpUpgrade podman-catatonitUpgrade golang-miscUpgrade slirp4netnsUpgrade golang-srcUpgrade podman-testsUpgrade fuse-overlayfsUpgrade criuUpgrade netavarkUpgrade toolbox-testsUpgrade critUpgrade cockpit-podmanUpgrade udicaUpgrade golang-docsUpgrade buildahUpgrade git-lfsUpgrade podman-gvproxyUpgrade python3-criuUpgrade podman-dockerUpgrade go-toolsetUpgrade golang | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golang-miscUpgrade golang-testsUpgrade golang-github-kr-pty-develUpgrade golang-raceUpgrade golang-github-gorilla-context-develUpgrade go-filesystemUpgrade golang-binUpgrade go-srpm-macrosUpgrade golang-docsUpgrade golang-github-gorilla-mux-develUpgrade runcUpgrade golang-googlecode-net-develUpgrade go-rpm-macrosUpgrade golang-srcUpgrade go-rpm-templatesUpgrade golangUpgrade golang-github-godbus-dbus-develUpgrade runc-debuginfoUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golistUpgrade golang-raceUpgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade runcUpgrade grafana-pcpUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-pcp-debuginfoUpgrade slirp4netns-debugsourceUpgrade delveUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade git-lfsUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade python3-criuUpgrade podman-dockerUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade criu-develUpgrade critUpgrade grafanaUpgrade criu-libs-debuginfoUpgrade golang-docsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade buildah-testsUpgrade git-lfs-debuginfoUpgrade podmanUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade criuUpgrade skopeoUpgrade toolboxUpgrade crun-debuginfoUpgrade libslirp-develUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade golang-miscUpgrade criu-libsUpgrade golang-srcUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade git-lfs-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade containers-commonUpgrade buildahUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade golangUpgrade golang-raceUpgrade slirp4netnsUpgrade python3-podman | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildahUpgrade grafana-pcpUpgrade buildah-testsUpgrade golang-raceUpgrade runcUpgrade golang-docsUpgrade udicaUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade skopeoUpgrade podmanUpgrade podman-dockerUpgrade golangUpgrade critUpgrade golang-binUpgrade golang-miscUpgrade criuUpgrade netavarkUpgrade fuse-overlayfsUpgrade golang-testsUpgrade criu-develUpgrade cockpit-podmanUpgrade conmonUpgrade crunUpgrade container-selinuxUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade skopeo-testsUpgrade go-toolsetUpgrade podman-pluginsUpgrade slirp4netnsUpgrade libslirpUpgrade grafanaUpgrade delveUpgrade criu-libsUpgrade python3-criuUpgrade golang-srcUpgrade containers-commonUpgrade libslirp-develUpgrade git-lfs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade grafana-pcp-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade container-selinuxUpgrade podman-testsUpgrade git-lfsUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade podman-gvproxyUpgrade critUpgrade slirp4netnsUpgrade delveUpgrade grafanaUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade go-toolsetUpgrade conmonNo solution existsUpgrade slirp4netns-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade toolboxUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade udicaUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade criu-libsUpgrade buildahUpgrade toolbox-testsUpgrade golang-testsUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade criuUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podmanUpgrade golangUpgrade libslirp-develUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade grafana-debuginfoUpgrade crun-debuginfoUpgrade golang-raceUpgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade git-lfs-debuginfoUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade golang-miscUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade python3-podmanUpgrade netavarkUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade containers-commonUpgrade podman-remote | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade criu-develUpgrade golang-raceUpgrade delve-debugsourceUpgrade criuUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade criu-debugsourceUpgrade critUpgrade libslirp-develUpgrade delve-debuginfoUpgrade criu-debuginfoUpgrade grafana-pcpUpgrade criu-libsUpgrade golangUpgrade git-lfs-debuginfoUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade grafana-debuginfoUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade grafanaUpgrade libslirp-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.18Upgrade go1.18-docUpgrade go1.17Upgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16Upgrade golang-1.13-goUpgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub